Privacy Policy.

1. Who we are

Timpson Marketing ("Timpson Marketing," "we," "us," or "our") is a digital marketing agency based in St. George, Utah, owned and operated by Joseph Timpson. We provide SEO, AI marketing (GEO/LLM optimization), paid ads, paid media, and related growth services to small and mid-sized businesses across the United States.

This Privacy Policy explains how we handle personal information collected through timpsonmarketing.com (the "Site") and through our client services. By using the Site or engaging us, you agree to this policy.

2. Information we collect

We collect only what we need to operate the Site, deliver our services, and communicate with you.

a. Information you give us directly

• Contact details: name, email address, phone number, company, and website when you submit our contact form, audit request form, or email us directly.
• Project details: what you're trying to grow, what you've tried, business context, marketing goals, and any other information you choose to share with us.
• Client onboarding data: if you become a client, we collect billing details (handled through our payment processor, not stored by us), brand assets, marketing access (e.g., Google Search Console, Google Ads, GA4, Meta Ads, Google Business Profile), and any business data needed to deliver the work.

b. Information collected automatically

• Log data: IP address, browser type, operating system, referring page, and pages visited.
• Usage data: how you interact with the Site, including pages viewed, time on page, and clicks on outbound links or CTAs.
• Cookies and similar technologies: see Section 5 below.

c. Information from third parties

If you connect Google Analytics, Google Search Console, Google Ads, Google Business Profile, or Meta accounts to us as part of an audit or engagement, we receive performance data from those platforms. We do not buy contact lists.

3. How we use your information

• Respond to inquiries, deliver requested audits, and answer questions.
• Provide, maintain, and improve our services.
• Communicate with you about projects, proposals, invoices, and follow-ups.
• Send occasional emails about Timpson Marketing content, services, or relevant news. You can unsubscribe at any time.
• Analyze Site performance and improve our marketing.
• Comply with legal obligations and enforce our agreements.

We do not sell your personal information. We do not share your personal information with advertisers or data brokers for them to market to you.

4. Legal bases for processing (EEA / UK visitors)

If you are in the European Economic Area or the United Kingdom, we process your personal information under the following legal bases:

• Contract: to provide services you have requested or to take steps before entering a contract.
• Legitimate interests: to operate, secure, and improve our business and the Site, where these interests are not overridden by your rights.
• Consent: for non-essential cookies and for marketing emails, where required by law. You can withdraw consent at any time.
• Legal obligation: when we are required to retain or disclose information to comply with applicable law.

5. Cookies and tracking

The Site uses cookies and similar technologies for three purposes:

• Essential: required for the Site to function (e.g., security, form submission).
• Analytics: Google Analytics 4 ("GA4") helps us understand which content is useful and which is not. IP addresses are anonymized.
• Advertising and conversion measurement: the Meta (Facebook) Pixel and Google Ads tags help us measure the effectiveness of our marketing and reach people who have visited the Site.

You can control cookies through your browser settings, opt out of GA4 with the Google Analytics Opt-out Browser Add-on, opt out of Meta ads in your Meta ad preferences, and opt out of personalized Google ads in your Google Ad Settings.

6. Third-party services we use

We rely on a limited set of vendors to operate. Each one processes data only for the purpose described and is bound by their own terms and privacy policies.

• Google LLC — GA4 analytics, Google Workspace email, Google Search Console, Google Business Profile, Google Ads.
• Meta Platforms, Inc. — Meta Pixel, Meta Ads.
• Hosting and infrastructure — the Site is served from a U.S.-based hosting provider with standard security controls.
• Email and CRM — Google Workspace, plus an outbound email tool used solely for cold outreach to businesses (never to consumer addresses or to people who have opted out).
• Payment processing — clients are billed through standard payment processors. We do not store full credit card or bank numbers on our systems.
• AI tools — we use Anthropic Claude and other large language models to help draft, audit, and analyze. Client data shared with these tools is sent through enterprise APIs and is not used to train public models.

7. How we share information

We share personal information only in these limited situations:

• Service providers: the vendors listed in Section 6, only to the extent needed to deliver the service.
• Legal and safety: when required by law, subpoena, or to protect our rights, your safety, or the safety of others.
• Business transfers: if Timpson Marketing is involved in a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before any such transfer changes how your information is handled.
• With your consent: any other sharing happens only with your explicit permission.

8. How long we keep information

We keep personal information only as long as it is needed for the purposes described in this policy. Inquiry data is retained for up to 24 months from your last interaction. Client engagement data is retained for the duration of the engagement and up to seven years afterward to comply with tax, accounting, and legal obligations. Marketing email lists are retained until you unsubscribe. You can ask us to delete your information sooner (see Section 9).

9. Your rights

Depending on where you live, you may have the right to:

• Access the personal information we hold about you.
• Correct or update inaccurate information.
• Delete your personal information.
• Restrict or object to certain processing.
• Receive a portable copy of the information you provided to us.
• Withdraw consent at any time, where processing is based on consent.
• Lodge a complaint with your local data protection authority.

California residents (CCPA/CPRA): you have the right to know what personal information we collect, the right to delete it, the right to correct it, and the right to opt out of the sale or sharing of personal information. We do not sell personal information.

To exercise any of these rights, email joseph@timpsonmarketing.com. We respond within 30 days. We will not discriminate against you for exercising your rights.

10. Security

We use reasonable administrative, technical, and physical safeguards to protect personal information, including TLS encryption in transit, access controls, multi-factor authentication on internal accounts, and the principle of least privilege when sharing client access. No method of transmission or storage is perfectly secure. If we ever experience a breach affecting your personal information, we will notify you and the appropriate authorities as required by law.

11. Children

The Site and our services are intended for businesses and adults. We do not knowingly collect personal information from children under 13 (or under 16 in the EEA/UK). If you believe a child has provided us personal information, contact us and we will delete it.

12. International users

Timpson Marketing operates from the United States, and our infrastructure and vendors are primarily U.S.-based. If you access the Site or engage us from outside the United States, your information will be transferred to and processed in the United States. By using the Site, you consent to this transfer.

13. Do Not Track

Some browsers transmit "Do Not Track" signals. Because there is no industry consensus on how to interpret these signals, the Site does not respond to them. You can still control tracking through the cookie controls described in Section 5.

14. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the most recent revision. Material changes will be communicated through the Site or, where appropriate, by email. Continued use of the Site after a change constitutes acceptance of the updated policy.

15. Contact us

Questions, requests, or complaints about this policy or your personal information go to:

Joseph Timpson, Owner
Timpson Marketing
St. George, Utah, USA
Email: joseph@timpsonmarketing.com
Web: timpsonmarketing.com/contact